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Top Stories 

• The Federal Energy Regulatory Commission and North American Electric Reliability 
Corporation reached a $3.25 million settlement with Arizona Public Service Co., July 7 for 
their alleged role in a 201 1 power outage. - Arizona Republic (See item 2) 

• Blue Shield of California announced July 7 that the Social Security numbers and work 
information of around 18,000 California health-care professionals were mistakenly made 
public after the health insurance provider failed to mark the information as confidential. - 
IDG News Service (See item 18) 

• A tree branch lying across the tracks derailed the Ninja roller coaster at Six Flags Magic 
Mountain in California, July 7 prompting an evacuation of patrons who were suspended 
about 40 feet above the ground for about 3 hours. - Los Angeles Times (See item 28) 

• Police arrested 4 individuals and removed 20 others from A1 Lang Stadium in St. 
Petersburg, Florida, July 6 after several smoke bombs were set off in the stands and a fight 
broke out during a soccer match. - Bay News 9 (See item 29) 
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Energy Sector 



1. July 8, KMOV 4 St. Louis - (Missouri) Ameren Missouri working to restore power 
after overnight storms. Ameren Missouri crews continued work to restore power July 
8 to 13,000 customers after severe storms knocked out service to more than 23,500 
customers overnight July 7. 

Source: http://www.kmov.com/news/local/Ameren-Missouri-working-to-restore- 
power-after-overnight-storms-266200241.html 

2. July 7, Arizona Republic - (International) APS to pay $3.25 million for 2011 outage. 
The Federal Energy Regulatory Commission and the North American Electric 
Reliability Corporation reached a $3.25 million settlement with Arizona Public Service 
Co., July 7 to end an investigation into the company’s role in a 201 1 power outage that 
left about 5 million customers in California, Arizona, and in Mexico without power for 
up to 12 hours. The fine includes civil penalties and system improvements to update 
reliability. 

Source: http://www.azcentral.com/storv/monev/business/2014/07/07/aps-pav-million- 
power-outage/12324533/ 

3. July 7, KENS 5 San Antonio - (Texas) CPS Energy, SAFD continue to investigate 
cause of warehouse fire at power plant site. The San Antonio Fire Department and 
CPS Energy authorities are investigating the cause of a July 6 fire at the JT Deely 
Power Plant at Calaveras Power Station in Bexar County that destroyed a warehouse 
and caused an estimated $500,000 in damages. 

Source: http://www.kens5.com/news/Overnight-fire-destrovs-CPS-Energy-Calaveras- 
Power-Station-26595027 1 .html 

1 Return to top ] 

Chemical Industry Sector 

4. July 7, Charleston Daily Mail - (West Virginia) OSHA fines Freedom Industries 
$11,000 for chemical spill. The Occupational Safety and Health Administration cited 
Freedom Industries July 3 for serious health and safety violations related to a January 
chemical spill at the company’s Charleston, West Virginia facility and fined the 
company $1 1,000. Violations include failing to have a liquid tight wall surrounding a 
leaking tank at the site of the spill, and not having standard railings on an elevated 
platform used to cross over a containment wall. 

Source: http ://w w w .chaiiestondailymail. com/article/20 1 407 07/DM0 1/1 407 09517 

T Return to top i 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 



5. July 7, New York Times - (National) Ford recalls 92,000 vehicles for driveshaft 
problem. Ford announced a recall July 7 for around 92,000 vehicles in North America, 
including around 83,000 in the U.S., due to a front, right half shaft issue that can cause 
the vehicles to experience sudden loss of drive function. The vehicles included in the 
recall were model year 2013-2014 Ford Flex, Taurus, Police Interceptor, Lincoln MKT, 
and MKS vehicles and model year 2012-2014 Ford Edge and Lincoln MKX vehicles. 
Source: http://www.nvtimes.com/2014/07/08/automobiles/ford-recalls-9200Q-vehicles- 
for-driveshaft-problem.html 

[ Return to top ] 



Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

6. July 8, Krebs on Security - (International) Feds charge carding kingpin in retail 
hacks. The U.S. Department of Justice announced July 7 that the U.S. Secret Service 
arrested a Russian national for allegedly working with others to steal and sell payment 
card details from stores and restaurants throughout the U.S. between 2009 and 2011. 
The man and his accomplices allegedly planted malware on merchants’ point-of-sale 
(POS) devices in order to obtain the payment card information and then sold it through 
underweb forums. 

Source: http://krebsonsecurity.com/2014/07/feds-charge-carding-kingpin-in-retail- 
hacks/ 

7. July 7, U.S. Attorney’s Office, Eastern District of Missouri - (Missouri) Wentzville 
man pleads guilty to multiple armed bank robberies and shooting of Missouri 
State Trooper. A Wentzville man pleaded guilty July 7 to the armed robberies of three 
Missouri banks between July and September 2013. The man also pleaded guilty to 
shooting a Missouri State Trooper during his arrest in September 2013. 

Source: http://www.fbi.gov/stlouis/press-releases/2014/wentzville-man-pleads-guilty- 
to-multiple-armed-bank-robberies-and-shooting-of-missouri-state-trooper 

8. July 7, Easton Express-Times - (New Jersey; Georgia; South Carolina) Flemington 
man pleads guilty to fraud in vacation home mortgage scheme. A Flemington, New 
Jersey man pleaded guilty July 7 to working with 10 co-conspirators to identify 
distressed oceanfront condominiums in New Jersey, Georgia, and South Carolina, 
recruit straw buyers, furnish them with falsified documents, and then obtain $41 
million in fraudulent mortgages. 

Source: http://www.lehighvalleylive.com/hunterdon-countv/express- 
times/index.ssf/2014/07/flemington man pleads guilty i.html 
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Transportation Systems Sector 

9. July 8, Bluefield Daily Telegraph - (West Virginia) Rock road closed due to bridge 
collapse. Several sections of a bridge spanning across the Bluestone River near Rock, 
West Virginia, partially collapsed July 7 after a truck attempted to cross it. Authorities 
were unsure how long the road will be closed and directed residents to use an alternate 
route. 

Source: http://www.bdtonline.com/local/x611405718/Rock-road-closed-due-to-bridge- 
collapse 

10. July 8, WCBS 2 New York City - (New Jersey) NJ Transit, Amtrak service resumes 
after overhead wire problem suspends train. A power outage halted service on 
several New Jersey Transit and Amtrak rail lines July 8. Service was restored later that 
morning and affected lines resumed with residual delays. 

Source: http://newvork.cbslocal.com/2014/07/08/overhead-wire-problem-suspends-ni- 
transit-amtrak-trains/ 



For another story, see item 32 
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Food and Agriculture Sector 

11. July 8, Lancaster Intelligencer Journal/Lancaster New Era - (Pennsylvania) 2nd 2- 
alarm fire at same property in 7 months destroys Leacock Township barn. A 2- 
alarm fire destroyed a dairy bam, equipment and machinery, a small amount of hay, 
and part of a milkhouse July 8 in Leacock County. Authorities are investigating the 
source of the fire that caused an estimated $450,000 in damage. 

Source: http://lancasteronline.com/news/local/alarm-fire-destroys-barn-in-leacock- 
township/article 40656ff6-0685-l Ie4-8a46-001a4bcf6878.html 

12. July 6, WHAG 25 Hagerstown - (Pennsylvania) Barn fire burns $350,000 worth of 
equipment, kills 25 calves. A fire broke out inside a barn at Rocky Spring Farm in 
Chambersburg July 5 when tightly-packed hay barrels combusted due to high 
temperatures. The fire reignited due to high winds July 6 and least 23 calves were 
killed and $350,000 worth of farm equipment was damaged by the fire. 

Source: http://www.your4state.com/story/d/story/bam-fire-burns-350000-worth-of- 
equipment-kills-25/229Q6/slUPOIdpgk-WMdnNsHZr8A 

13. July 6, WSLS 10 Roanoke - (Virginia) Montgomery County fire causes $75,000 in 
damage, smoke hangs in air. Firefighters responded July 6 to a farm in Montgomery 
County, Virginia, to extinguish a fire that damaged a barn, 5,000 bales of hay, and at 
least 4 pieces of farm equipment, amounting to an estimated $75,000 in damages. The 
National Weather Service issued a special weather statement alerting people to reduced 
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visibility and poor air quality as a result of heavy smoke caused by the blaze. 

Source: http://www.wsls.com/storv/25950281/montgomerv-county-fire-causes-75000- 
in-damage-smoke-hangs-in-air 
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Water and Wastewater Systems Sector 

14. July 8, WBNS 10 Columbus - (Ohio) Ohio EPA: E.Coli found in watershed. The 
Ohio Environmental Protection Agency reported finding high levels of E.Coli, 
phosphorous, and other pollutants in the tributaries that feed the Scioto River near 
Columbus. E.Coli levels at sites used by swimmers and boaters were found to be above 
federal safety limits, with manure from farms the likely source of the bacteria. 

Source: http://www.10tv.com/content/stories/2014/07/08/columbus-high-levels-of-e- 
coli.html 

15. July 7, New Bedford Standard Times - (Massachusetts) Arthur overwhelmed local 
sewage plants. The New Bedford Department of Public Infrastructure Commissioner 
reported that rains from Hurricane Arthur July 4 caused sewage plants to become 
overwhelmed, flooding streets as well as closing beaches throughout Buzzards Bay due 
to possible bacteria in the discharged water. 

Source: 

http://www.southcoasttodav.com/apps/pbcs.dll/article?AID=/20140707/NEWS/407070 
336/- 1/NEWS 

16. July 7, KXAN 36 Austin - (Texas) 47,000 gallons of wastewater spills into tributary. 
About 47,000 gallons of wastewater was spilled into a tributary of Bears Creek in 
southwest Austin July 7 after the Southland Oaks lift station experienced a malfunction, 
causing s residents to be placed under a boil water advisory. 

Source: http://kxan.com/2014/07/07/47000-gallons-of-wastewater-spills-into-tributary/ 

17. July 7, MLive.com - (Michigan) Heavy rainfall causes discharge of 7 million gallons 
of treated water from Saginaw Township retention basin. Heavy rainfall July 6 
caused about 7 million gallons of treated water to be discharged from a retention basin 
in Saginaw Township into the Tittabawassee River. 

Source: 

http://www.mlive.com/news/saginaw/index.ssf/2014/07/heavy rainfall causes 7 milli 
o.html 
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Healthcare and Public Health Sector 

18. July 7, IDG News Service - (California) Blue Shield discloses 18,000 doctors’ Social 
Security numbers. Blue Shield of California announced July 7 that the Social Security 
numbers and work information of around 18,000 California physicians and health-care 
providers were mistakenly made public after the health insurance provider did not mark 
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rosters containing the information as confidential during required monthly filings sent 
to the State’s Department of Managed Health Care. The information was released 10 
times as a result of public records requests. 

Source: http://www.networkworld.com/article/2451621/blue-shield-discloses-1800Q- 
doctors-social-security-numbers.html 

19. July 7, U.S. Environmental Protection Agency - (International) EPA takes action to 
bring Suffolk County company into compliance with pesticides regulations; fines 
company for selling unregistered cleaning and surface disinfectant products. New 

York-based Air Techniques, Inc., reached a settlement July 7 with the U.S. 
Environmental Protection Agency regarding violations of federal law governing 
pesticides after the company sold unregistered pesticides and imported pesticides in the 
U.S. without proper notification. The company, which sells wholesale cleaners and 
surface disinfectants used to clean instruments and equipment in dental offices and 
medical facilities, will pay a $375,000 penalty. 

Source: 

http://vosemite.epa.gov/opa/admpress.nsf/d0cf6618525a9efb85257359003fb69d/37dfe 

Ialcda6028885257d0e00553ala 
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Government Facilities Sector 

20. July 8, Salt Lake City Deseret News - (Utah) Crews move closer to containing 
wildfire near Vernal, put out 2 smaller fires. Crews reached 50 percent containment 
July 7 of the 3,200-acre Taylor Mountain Road Fire burning near Taylor Mountain in 
Vernal. The wildfire destroyed three homes and forced the evacuation of Steinaker 
State Park. 

Source: http://www.deseretnews.com/article/865606497/Crews-move-closer-to- 
containing-wildfire-near-Vemal-put-out-2-smaller-fires.html 

21. July 7, WBZ 4 Boston - (Massachusetts) Custodian dies in hazmat incident at 
Plymouth school. Manomet Elementary School in Plymouth was evacuated and closed 
after a school employee died and 1 1 others were transported to an area hospital for 
possible chemical exposure July 7 in an incident involving HAZMAT materials. 
Officials worked to identify the chemical agent. 

Source: http://boston.cbslocal.com/2014/07/07/one-dead-in-hazmat-incident-at- 
plymouth-school/ 

22. July 7, Casper Star-Tribune - (Wyoming) Wildfire prompts campground evacuation 
in Medicine Bow National Forest. Officials evacuated a campground in the Medicine 
Bow National Forest in Wyoming and advised local residents to shelter in place while 
fire crews worked to contain the 300-acre Owen Fire burning near Fake Owen July 7. 
Source: http://trib.com/news/state-and-regional/wildfire-prompts-carnpground- 
evacuation-in-med ic ine-bow-national-forest/article 026c8b73-07a9-5f49-9 1 a 1 - 
0937c9b7410e.html 



- 6 - 



r Return to top i 



Emergency Services Sector 

See item 5 
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Information Technology Sector 

23. July 8, Softpedia - (International) Rosetta Flash attack mitigated by the new Adobe 
Flash Player 14.0.0.145. Adobe released an update for its Flash Player that closes a 
vulnerability identified by a Google researcher that could allow an attacker to abuse 
JSONP endpoints and cause victims to run arbitrary requests and leak sensitive data. 
Source: http://news.softpedia.com/news/Rosetta-Flash-Attack-Mitigated-by-the-New- 
Adobe-Flash-Player- 1 4-0-0- 1 45 -449984. shtml 

24. July 8, IDG News Service - (International) Vulnerability in AVG security toolbar 
puts IE users at risk. Researchers with the CERT Coordination Center (CERT/CC) 
found that the AVG Secure Search browser toolbar could allow attackers to execute 
malicious code due to an ActiveX control that exposes sensitive functionality to Web 
sites. The vulnerability affects AVG Secure Search versions 18.1.6 and earlier. 

Source: http://www.networkworld.com/article/2451861/vulnerabilitv-in-avg-security- 
toolbar-puts-ie-users-at-risk.html 

25. July 8, Securityweek - (International) NETGEAR switches exposed to attacks from 
hardcoded credentials. An advisory from the CERT Coordination Center (CERT/CC) 
warned users of Netgear GS108PE ProSafe Plus Switches that attackers can log into the 
switches and execute arbitrary code by using a hardcoded login and password. 

Source: http://www.securityweek.com/netgear-switches-exposed-attacks-hardcoded- 
credentials 

26. July 7, SC Magazine - (International) Massachusetts man charged in Twitter hack. 

A Massachusetts man was charged July 2 for allegedly hacking into helpdesk services 
company Zendesk, disabling a security feature that restricted access to customer 
information, and exporting Twitter support tickets. The information was then allegedly 
used to compromise and deface Twitter’s and Zendesk’s Twitter feeds. 

Source: http://www.scmagazine.com/massachusetts-man-charged-in-twitter- 
hack/article/3 5 97 04/ 

27. July 7, The Register - (International) App permissions? Pah! Rogue Android soft 
can ‘place phone calls at will’. Researchers with Curesec identified vulnerabilities in 
the Android mobile operating system that could allow malicious apps to place phone 
calls and send Unstructured Supplementary Service Data (USSD) codes. One 
vulnerability affects Android versions 4.1.1 and up, while the second affects older 
Android 2.3.3 and 2.3.6 versions. 
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Source: http://www.theregister.co.uk/2014/07/07/android dialer vulnerabilities/ 



For another story, see item 6 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

See item 27 
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Commercial Facilities Sector 

28. July 8, Los Angeles Times - (California) Six Flags inspects Ninja roller coaster after 
car derails, injures 4. A tree branch lying across the tracks derailed the first car of the 
Ninja roller coaster at Six Flags Magic Mountain in California, July 7 prompting an 
evacuation of patrons who were suspended about 40 feet above the ground for about 3 
hours. Four people were injured and the ride remains closed while officials investigate. 
Source: http://www.latimes.com/local/lanow/la-me-ln-six-flags-roller-coaster- 
inspection-car-derails-20140708-story.html 

29. July 7, Bay News 9 - (Florida) Four arrested after smoke bombs set off during 
Rowdies game at A1 Lang Stadium. Police arrested 4 individuals and removed 20 
others from A1 Lang Stadium in St. Petersburg July 6 after several smoke bombs were 
set off in the stands and a fight broke out during a soccer match. Firefighters responded 
to the scene after receiving reports of a fire in the stands. 

Source: 

http://www.bavnews9.com/content/news/baynews9/news/article.html/content/news/arti 
cles/bn9/2014/7/7/no injuries after sm.html 

30. July 6, WATE 6 Knoxville - (Tennessee) More than 50 residents affected after 
flooding at West Knoxville apartment complex. More than 50 residents were 
temporarily displaced following a July 5 fire at the West View Apartments in Knoxville 
that triggered the sprinkler system and caused significant damage to the structure. 

Police are investigating and believe the fire was started when a resident fell asleep 
while cooking. 

Source: http://www.wate.com/story/25949832/more-than-50-residents-affected-after- 
flooding-at-west-knoxville-apartment-complex 
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31. July 5, WATE 6 Knoxville - (Tennessee) Fire destroys Loudon County church 

building, family's apartment. Authorities are investigating the cause of a July 5 fire in 
Loudon County, Tennessee, that rendered the Word of Faith Family Worship Center 
and an apartment above the church a total loss. Seven residents were displaced by the 
fire. 

Source: http://www.wate.com/storv/25946747/fire-destroys-loudon-county-church- 
building-familys-apartment 
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Dams Sector 

32. July 6, Fresno Bee - (California) Levee breaks east of Sanger, several families 
evacuate. A 20-foot section of the Alta Irrigation District main canal levee ruptured 
east of Sanger July 6, causing a 200-foot swath of water to flood Highway 180 and shut 
down the westbound lane for several hours. 

Source: http://www.mercedsunstar.com/2014/07/06/3735169/levee-breaks-on-friant- 
kem-canal.html 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 
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Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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